TI-2025-42382 CVE-2025-68926 · GHSA-h956-rh7x-ppgj
RustFS has a gRPC Hardcoded Token Authentication Bypass
Priority HIGH 82
RustFS is a distributed object storage system built in Rust.
rustfs
Records33All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high13CVSS 7.0–8.9
Exploited now
rustfs records in CISA KEVNo rustfs vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
12 records in Rustfs · all components
TI-2025-42176 CVE-2025-68705 · GHSA-pq29-69jg-9mxc
RustFS Path Traversal Vulnerability
Priority HIGH 77
RustFS is a distributed object storage system built in Rust.
TI-2026-17564 CVE-2026-21862 · GHSA-fc6g-2gcp-2qrq
RustFS sourceIp bypass via spoofed X-Forwarded-For/Real-IP headers
Priority HIGH 75
RustFS is a distributed object storage system built in Rust.
TI-2026-19963 CVE-2026-24762 · GHSA-r54g-49rx-98cr
RustFS Logs Sensitive Credentials in Plaintext
Priority HIGH 70
RustFS is a distributed object storage system built in Rust.
TI-2025-42706 CVE-2025-69255 · GHSA-gw2x-q739-qhcr
RustFS gRPC GetMetrics deserialization panic enables remote DoS
Priority MEDIUM 64
RustFS is a distributed object storage system built in Rust.
TI-2026-17737 CVE-2026-22043 · GHSA-xgr5-qc6w-vcg9
RustFS has IAM deny_only Short-Circuit that Allows Privilege Escalation via Service Account Minting
Priority MEDIUM 59
RustFS is a distributed object storage system built in Rust.
TI-2026-17736 CVE-2026-22042 · GHSA-vcwh-pff9-64cc
RustFS has IAM Incorrect Authorization in ImportIam that Allows Privilege Escalation
Priority MEDIUM 59
RustFS is a distributed object storage system built in Rust.
TI-2026-28347 CVE-2026-39360 · GHSA-mx42-j6wv-px98
RustFS has an authorization bypass in multipart UploadPartCopy enables cross-bucket object exfiltration
Priority MEDIUM 57
RustFS is a distributed object storage system built in Rust.
TI-2026-18300 CVE-2026-22782 · GHSA-333v-68xh-8mmq
RustFS RPC signature verification logs shared secret
Priority MEDIUM 54
RustFS is a distributed object storage system built in Rust.
TI-2026-22174 CVE-2026-27822 · GHSA-v9fg-3cr2-277j
Rust has Critical Stored XSS in Preview Modal, leading to Administrative Account Takeover
Priority MEDIUM 49
RustFS is a distributed object storage system built in Rust.
TI-2026-21993 CVE-2026-27607 · GHSA-w5fh-f8xh-5x3p
RustFS's Missing Post Policy Validation leads to Arbitrary Object Write
Priority MEDIUM 41
RustFS is a distributed object storage system built in Rust.
TI-2026-29589 CVE-2026-40937 · GHSA-pfcq-4gjr-6gjm
Missing authorization in rustfs
Priority LOW 38
RustFS is a distributed object storage system built in Rust.